TWM504991U - System of applying mobile certificate online by valid certificate - Google Patents

Description

System for applying for action certificates online with valid credentials

A voucher application system, in particular, a system for applying for an action voucher online with a valid voucher.

An electronic voucher, also known as a digital voucher, is an identity recognition mechanism for computer systems. The electronic voucher is a signature signed by the identity certification authority on the digital ID card. This behavior indicates that the identity certification authority has determined that the user has a digital identity card. An electronic voucher is a file or group of computer files that record the identity of the owner and a set of public keys. The owner of the electronic voucher can authenticate himself to the computer system to access or use a particular computer service.

In recent years, as network security has become more and more important, the demand for using electronic credentials has become higher and higher. However, at present, the electronic voucher often requires the applicant to carry the identity document in person to go to the counter of the business applying for the electronic voucher, so as to confirm the identity of the applicant of the electronic voucher, which is inconvenient for the applicant of the electronic voucher, and the electronic Certificates are not easy to popularize.

In summary, it can be seen that in the prior art, there has been a long-standing problem that the application for an electronic voucher needs to confirm the identity of the applicant, which requires the applicant to personally come to the cabinet and cause inconvenience to the applicant. Therefore, it is necessary to propose an improved technical means to solve the problem. .

In view of the prior art, there is a problem that the application for the electronic voucher needs to confirm that the applicant's identity causes the applicant to be inconvenienced in person, and the present invention discloses a system for applying for an action voucher online with valid voucher, wherein:

The system for applying for a valid voucher on the valid voucher is disclosed by the present invention, comprising at least: a first client for providing valid credentials; a verification server; a registration server for verifying the valid voucher through the verification server, and verifying The server obtains the applicant data corresponding to the valid voucher, and provides the input verification data, and receives the voucher application signature issued by the first client using the valid voucher for the voucher application data signature, wherein the voucher application information includes the application The second client is configured to provide input confirmation information and a voucher request file; the voucher management server is configured to receive the voucher application data and the voucher application signature transmitted by the registration server, and apply for signature according to the voucher When the voucher application data is verified and the confirmation data transmitted by the second client is matched with the voucher application data, the action voucher is generated according to the voucher request file transmitted by the second client, and the action voucher is transmitted to the second client.

Another system for applying for an action credential with valid credential disclosed in the present invention includes at least: a client for providing valid credential and a credential request file; an entry server for providing client connection; and a verification server; The registration server is configured to verify the valid certificate transmitted by the portal server to the registration server through the verification server, obtain the applicant data corresponding to the valid certificate through the verification server, and provide input verification data, and use The voucher application signature is generated by using the valid voucher to generate the voucher application signature, wherein the voucher application information includes the applicant information and the verification data; the voucher management server is configured to receive the voucher application information and the voucher application signature transmitted by the registration server. And according to the voucher application for signature verification voucher application data, and for generating an action voucher according to the voucher application data, and judging that the confirmation data transmitted by the client matches the voucher application data, according to the voucher request transmitted by the second client The file generates an action credential and transmits the action credential to the client.

The system disclosed in this creation is as above, and the difference from the prior art is that after the creation is verified by the verification server through the valid credentials provided by the client, the registration server confirms the applicant data and generates the applicant data and verification. The voucher application data of the data and the corresponding voucher application signature, the voucher management server successfully validates the voucher application data according to the voucher application signature, and generates the registration data of the action voucher according to the voucher application data, and judges the same or different client When the transmitted confirmation data is consistent with the voucher application data, the generated action voucher is transmitted to the client transmitting the confirmation data, thereby solving the problems existing in the prior art, and the technical effect of facilitating the electronic voucher application can be achieved.

The features and implementations of the present invention will be described in detail below in conjunction with the drawings and embodiments, which are sufficient to enable any skilled person to fully understand the technical means to which the present invention solves the technical problems and implement them accordingly. The achievable effect of this creation.

This creation can provide the applicant with the valid voucher to apply for the action voucher, and after completing the application for the action voucher, use the applicant's information and verification data entered in the process of applying for the action voucher to download the action voucher applied for. Among them, the valid vouchers mentioned in this creation are vouchers that can be verified by the Validation Authority (VA) at present, including but not limited to financial vouchers, natural person vouchers, business vouchers, and the like.

In addition, the applicant's information provided in this creation includes, but is not limited to, the applicant's name, applicant's identity card number, applicant identification information, and/or communication information, etc., which can identify the identity of the applicant; It is a material that can verify the identity of the applicant, for example, an authentication code and/or a verification password. However, this creation is not limited to this. The communication information includes but is not limited to an email address, a mobile phone number, and the like.

The following is a description of the system architecture of the creation of the first system diagram of the valid voucher online application certificate in the "Plan 1A". As shown in "FIG. 1A", the system of the present creation includes a first client 110a, a second client 110b, a registration server 130, an authentication server 140, and a credential management server 160.

The first client 110a may be a computer or a mobile device, but the creation is not limited thereto.

The first client 110a can provide input applicant information and verification materials. In general, the first client 110a can be connected to the registration server 130, and can display a user interface capable of applying for an action certificate, a user interface for displaying input applicant data, and displaying input applicant data and verification. User interface for the data. The content of the one or more user interfaces displayed by the first client 110a may be pre-stored in the first client 110a or may be received from the registration server 130. The present creation is not particularly limited.

The user interface capable of applying the action certificate may include a screen change object, such as a button or a link, but the present invention is not limited thereto. When the screen change object is clicked, the first client 110a can be switched from the current user interface to the start screen displaying the application action credential.

The first client 110a is also responsible for logging into the registration server 130 in accordance with valid credentials. In general, the valid credentials stored by the first client 110a can be accepted by the authentication server 140, so that the first client 110a can log in to the registration server 130 using valid credentials, but the present invention is not limited thereto.

The first client 110a is also responsible for signing the voucher application data generated by the registration server 130 using the valid voucher of the login registration server 130, thereby generating a voucher application signature corresponding to the voucher application data.

The second client 110b is usually a mobile device, such as a smart phone, a tablet, etc., but the creation is not limited thereto.

The second client 110b is responsible for providing input of applicant data and verification materials that are input during the application process of the action certificate. In the present creation, the applicant data and the verification data provided by the second client 110b are referred to as "confirmation materials". The second client 110b can display a user interface for inputting confirmation data, thereby providing input of confirmation data in the displayed user interface. The confirmation information provided by the second client 110b may include all or part of the applicant information and/or all or part of the verification data. For example, the confirmation data may include the applicant identification data, the communication data and the verification password, or may be Only applicant identification data and verification password, but this creation is not limited to this.

The second client 110b is responsible for transmitting the entered confirmation data and the generated certificate request file to the voucher management server 160. In general, the credential request file generated by the second client 110b includes the public key in the pair of keys generated by the second client 110b, the signature generated using the private key of the generated pair of keys, and User information for the generated key pair.

The second client 110b can also receive the action credentials transmitted by the credential management server 160. Generally, the credential management program can be installed in the second client 110b, and the credential management program can store and manage the action credential downloaded by the second client 110b.

In some embodiments, the second client 110b may receive the download information transmitted by the credential management server 160 through the communication data included in the verification data, and according to the received download information to the credential management server 160 or other server. (not shown) Download and install the credential manager. The download information received by the second client 110b is information that enables the second client 110b to download the credential management program, such as a download link of the credential management program, and guides the second client 110b to open the credential management program. Download the 2D barcode or QR code of the screen, but this creation is not limited to this.

In addition, in some embodiments, the second client 110b may execute a credential management program, and provide input confirmation data, generate a credential request file, transmit confirmation data, and a credential request file to the credential management server through the executed credential management program. 160. And receiving and storing the action credential returned by the credential management server 160.

The registration server 130 is responsible for receiving valid credentials transmitted by the first client 110a. In some embodiments, the registration server 130 can communicate the user interface providing the valid credentials to the first client 110a for display.

The registration server 130 is also responsible for verifying valid credentials through the authentication server 140.

The registration server 130 can also provide the first client 110a to input the applicant information and the verification data. In some embodiments, the registration server 130 can transmit the user interface of the input applicant profile and the user interface of the verification profile to the first client 110a for display, thereby providing the first client 110a to the displayed user. The applicant data and the verification data are input in the interface, and the applicant data and the verification data transmitted by the first client 110a are received. The registration server 130 can transmit a user interface for inputting the applicant data and the verification data to the first client 110a, or separately transmit different user interfaces for inputting the applicant data and the verification data to the first client. 110a.

The registration server 130 is also responsible for generating the voucher application data based on the applicant information and the verification data received from the first client 110a. In general, the registration server 130 can combine the applicant information and the verification data as the voucher application materials, or a combination. Applicant information, verification materials, and other materials are used as voucher application materials, but this creation is not limited to this. In other words, the voucher application materials submitted by this creation contain at least the applicant's information and verification materials.

In some embodiments, the registration module 131 may be included in the registration server 130, but the present invention is not limited thereto. After the registration module 131 is executed by the registration server 130, the applicant data and the verification data can be obtained, and the voucher application data can be generated, and the first client 110a can be guided to generate the voucher application signature.

The verification server 140 is responsible for verifying the valid credentials received by the registration server 130, and can obtain the applicant profile corresponding to the valid credentials after the valid credentials received by the registration server 130 are verified. In general, the verification server 140 is a credential verification server.

The voucher management server 160 is responsible for receiving the voucher application data and the voucher application signature transmitted by the registration server 130, and verifying the received voucher application data according to the received voucher application signature.

The voucher management server 160 is also responsible for generating the registration data of the action voucher according to the verified voucher application data after the voucher application data is verified.

In some embodiments, the credential management server 160 may transmit the download information of the credential management program to the second client 110b according to the communication data included in the verified voucher application data after the voucher application data is verified, thereby providing the first The second client 110b downloads the credential management program. The manner in which the credential management server 160 transmits the download information of the credential management program varies with the communication data. For example, when the communication material is the email address of the applicant, the credential management server 160 may download the information. The email is transmitted to the applicant (usually the user of the second client 110b), so that the applicant can operate the second client 110b to download the management program to the second client according to the download information in the received email. 110b installation, such as shooting QR code; and if the communication data is the applicant's mobile phone number, the voucher management server 160 can transmit the download information to the applicant in a short message, so that the applicant can download according to the received newsletter. The information operation second client 110b downloads and installs the management program, such as clicking the download link.

In addition, in some embodiments, the credential management server 160 may receive the credential request file and the confirmation data transmitted by the second client 110b, and determine the received confirmation data and the voucher application data transmitted by the registration server 130. Whether it matches. When the voucher management server 160 determines that the received confirmation data matches the voucher application data transmitted by the registration server 130, the action voucher corresponding to the voucher request file may be generated, and the action voucher generated according to the voucher application data is transmitted. To the second client 110b.

The voucher management server 160 can compare whether the item included in the confirmation data and the corresponding item included in the voucher application data are the same. When the voucher management server 160 is identical to the item of the item in which the confirmation data and the voucher application data are compared, the voucher management server 160 may determine that the confirmation data matches the voucher application data; and if any one of the items is compared If the data is not identical, the voucher management server 160 can determine that the confirmation data does not match the voucher application data. For example, if the confirmation data includes the applicant's name, the applicant's identity card number, and the like, the communication data such as the mobile phone number and the email address, and the verification password, the voucher management server 160 may separately compare the applications included in the confirmation data. Name of the applicant, applicant's identity card number, mobile phone number, e-mail address, and the name of the applicant, the applicant's identity card number, mobile phone number, e-mail address, and verification password included in the application code and the voucher application data. The name of the applicant, the identity card number of the applicant, the mobile phone number, the e-mail address and the verification password are the same as the applicant's name, applicant ID card number, mobile phone number, e-mail address and verification password included in the voucher application materials. At that time, it can be judged that the confirmation data is consistent with the voucher application data; and if the information of the applicant, the applicant identity card number, the mobile phone number, the e-mail address and the voucher application data, the applicant's name and applicant identity are included in the confirmation data. Certificate number, mobile number, email address and verification password are available A different, credential management server 160 may determine and confirm the information does not match the certificate application materials. In addition, the credential management server 160 may also determine, according to the user information in the credential request file, whether the user of the public key in the voucher request file has been registered, and according to the public key in the voucher request file and the signature in the voucher request file. A judgment is made as to whether the voucher request file is issued by a user who is a public key in the voucher request file.

In some embodiments, the credential management server 160 may also determine whether the time difference between the time when the download information of the credential management program is transmitted to the second client 110b and the time when the confirmation data transmitted by the second client 110b is received is in accordance with the predetermined time. The value, that is, whether the time difference between the time when the registration data of the action voucher is generated and the time when the confirmation data transmitted by the second client 110b is received satisfies the predetermined value, and the action voucher is generated when the time difference meets the predetermined value.

The system operation of this creation is illustrated by the second system architecture diagram of the valid voucher online application for action certificate in "1B". As shown in "FIG. 1B", the system of the present creation includes a client 110, an entry server 120, a registration server 130, an authentication server 140, and a credential management server 160.

The operation of the client 110 in the "FIG. 1B" is mostly the same as the first client 110a and the second client 110b in the "FIG. 1A". That is to say, the client 110 can display the user interface of the application procedure for the action credential and display the user interface for inputting the applicant data and the verification data in the process of applying for the action credential, and also provide the input confirmation data and the generated credential. The file is requested, and the entered confirmation data and the generated voucher request file are transmitted to the voucher management server 160, and the action voucher returned by the voucher management server 160 is received. In addition, the client 110 can also receive the download information transmitted by the credential management server 160 through the communication data included in the verification data, and download and install the credential management program according to the received download information to the credential management server 160 or other server. .

Different from the first client 110a and the second client 110b in the "FIG. 1A", the client 110 does not directly transmit the valid credentials to the registration server 130, but first connects to the portal server 120. The valid credentials are then transmitted to the registration server 130 in accordance with the guidance of the portal server 120. The portal server 120 can transmit an indication of transmitting the valid credential to the registration server 130 to the client 110, so that the client 110 connects to the registration server 130 according to the received indication, and transmits a valid credential, but the creation Without being limited thereto, in some embodiments, the portal server 120 may also directly direct the client 110 to the registration server 130.

In addition, in some embodiments, the client 110 can execute a collaborative application, and after being executed by the client 110, the collaborative application can display a user interface capable of applying for the action credential.

In some embodiments, if there are multiple registration servers 130 provided by the cooperation target, the portal server 120 may provide the user interface that selects the service using the cooperation target to the client 110 for display, so that the client 110 can The registration server 130 corresponding to the selected cooperation target is connected and transmits a valid credential. For example, there are two registration servers 130, one of which provides a service for securities transaction management, and the other provides a service for tax payment. The user interface provided by the portal server 120 to the client 110 may include a corresponding transaction management. The object and the item corresponding to the tax payment, when the item providing the selected securities transaction management or tax payment is selected by the client 110, the portal server 120 may select the valid transaction certificate according to the object selected by the client 110 to select the securities transaction management or tax payment. It is transmitted to the registration server 130 that provides the service of the securities transaction management or the tax payment service.

The registration server 130, the verification server 140, and the credential management server 160 are similar to the registration server 130, the verification server 140, and the credential management server 160 in the "A1A", and therefore will not be described in detail.

In addition, the system architecture of the present invention can also be as shown in the "1C". In the "1C", the client 110 is divided into two devices, a second client 110b and a third client 110c. The second client 110b is the same as the second client 110b in "Plan 1A". However, the third client 110c may first connect to the portal server 120, and then transfer the valid credentials to the registration server 130 according to the guidance of the portal server 120, and may display a user interface capable of applying the action certificate and The user interface for entering the verification data is displayed during the process of applying for the action certificate.

The portal server 120, the registration server 130, the verification server 140, and the credential management server 160 are similar to the portal server 120, the registration server 130, the authentication server 140, and the credential management server 160 in the "FIG. 1B". Therefore, it will not be described in detail.

Next, the operation system of the present creation is explained by an embodiment, and please refer to the flow chart of the method for applying for the action voucher on the valid voucher line in the "Phase 2A". In this embodiment, it is assumed that the first client 110a is a personal computer, and the registration server 130 is a web server. However, the first client 110a and the registration server 130 mentioned in the present application are not limited to the above.

When the user operates the first client 110a to browse the webpage provided by the registration server 130, if the webpage provided by the registration server 130 includes a button or a link for applying the action credential, and the user operates the first client click (click) After the button or link of the action certificate is applied, the first client 110a can read the valid credential of the user and transmit the read valid credential to the registration server 130.

After the registration server 130 receives the valid credentials provided by the first client 110a (step 210), the registration server 130 can verify the valid credentials via the verification server 140 (step 221).

After the verification server 140 verifies the valid certificate received by the registration server 130, the verification result can be transmitted back to the registration server 130, and the registration server 130 can determine whether the valid certificate passes the verification according to the verification result transmitted by the verification server 140. (Step 225). If the registration server 130 determines that the received valid credentials have not passed the verification by the verification server 140, the registration server 130 will not perform subsequent actions, so that the procedure for applying the action credentials ends.

If the valid credential received by the registration server 130 passes the verification by the verification server 140, the registration server 130 may provide the first client 110a to input the applicant data and the verification data (step 230). In this embodiment, it is assumed that the applicant information and the verification data provided by the registration server 130 include the user's name, identity card number, email account number, mobile phone number, and verification password.

After the registration server 130 provides the first client 110a to input the applicant profile and the verification profile (step 230), the first client 110a may use the valid credentials previously transmitted to the registration server 130 to include the applicant profile and the verification profile. The voucher application data signature is issued to generate a voucher application signature (step 240), and the generated voucher application signature is transmitted to the registration server 130. In this embodiment, it is assumed that the registration module 131 is executed in the registration server 130, and the registration module 131 can receive the applicant data transmitted by the verification server 140 and receive the verification data transmitted by the first client 110a, and use the verification data. The received applicant information, the verification data, and other materials constitute the voucher application data. Then, the first client 110a can use the valid voucher verified by the verification server 140 to sign the voucher application data composed by the registration module 131. The operation of the chapter, in this way, after completing the signature operation, the first client 110a may generate a voucher application signature corresponding to the voucher application data, and transmit the generated voucher application signature to the registration module 131, after which, The registration module 131 can transmit the generated voucher application information and the voucher application signature to the voucher management server 160.

After the voucher management server 160 receives the voucher application data and the voucher application signature (step 249) transmitted by the registration server 130, the voucher management server 160 may verify the voucher application data according to the voucher application signature (step 251). And after verification, the corresponding verification result is produced.

The voucher management server 160 can determine whether the voucher application material has passed the verification based on the generated verification result (step 255). If the voucher application data is not verified by the voucher management server 160, the voucher management server 160 will not perform subsequent actions, so that the procedure for applying the action voucher ends.

If the voucher management server 160 determines that the voucher application data has passed the verification, the voucher management server 160 may generate the registration data of the action voucher according to the voucher application data (step 260), and transmit the voucher according to the voucher application data or the communication data in the registration data. The download information of the management program is given to the user. In this embodiment, it is assumed that the credential management server 160 can transmit the QR code to the user via the e-mail address in the voucher application data by e-mail, and the user can operate the first client 110a to download. And reading the email transmitted by the credential management server 160, thereby obtaining the download link of the credential management program or downloading the QR code, or operating the second client 110b to download the credential management program or operating the second according to the download link obtained by the user. The client 110b captures the download code of the credential management program after downloading the QR code; the credential management server 160 can also transmit the credential management program download link or download the QR code to the mobile phone number (communication data) in the voucher application data. The second client 110b enables the second client 110b to download the credential management program according to the download link in the received newsletter or download the QR code.

After the second client 110b downloads and installs the credential management program, the credential management program can provide the input confirmation data through the second client 110b, and generate the credential request file, and transmit the confirmed confirmation data and the generated credential request file. The credential management server 160 is accessed (step 280). In this embodiment, it is assumed that the credential management program can provide the ID number entered by the user during the application process as shown in the flow of "FIG. 2B", and can be input through the second client 110b. The ID number is transmitted to the credential management server 160 (step 282), and the credential management server 160 determines that the received ID number exists in the generated registration data, and may be included in the registration data having the ID number. The communication data is transmitted to the user (step 284), so that the user can input the authentication code and the verification password input during the application process to the voucher management program, and the voucher management program can be input again through the second client 110b. The authentication code and verification password are passed to the credential management server 160 (step 286).

Continuing back to "FIG. 2A", after the second client 110b transmits the confirmation data and the voucher request file to the voucher management server 160 (step 280), the voucher management server 160 can determine whether the received confirmation data is The registration data matches (step 291). In this embodiment, it is assumed that the second client 110b provides the confirmation data input by the user including the user authentication code and the confirmation password, and the voucher management server 160 can search the generated registration data to search for the inclusion and the content. The registration data of the user identification data included in the confirmation data received, and comparing the authentication code and the verification password included in the searched registration data with the authentication code and the confirmation password included in the confirmation data, if No, the credential management server 160 will not perform subsequent actions, that is, the action credential will not be provided to the second client 110b.

If the authentication code and the verification password included in the searched registration information are the same as the authentication code and the confirmation password included in the confirmation data, the certificate management server 160 can determine that the received confirmation data matches the registration data, and The action credentials may be generated based on the public key in the received credential request file, and the generated action credentials are provided to the second client 110b (step 295).

After receiving the action credential transmitted by the credential management server 160, the second client 110b may store the received action credential. In this embodiment, it is assumed that the second client 110b stores and manages the received action credentials through the executed management program. In this way, through this creation, the user can apply for a mobile voucher using a valid voucher, and can apply for an action voucher without having to re-apply.

In the above embodiment, if the first client 110a and the second client 110b are the same device, it is assumed to be a smart phone (client 110), but the creation is not limited.

When the client 110 executes the application, the executed application displays a button or link containing the application action certificate, and the user operates the client 110 to click (click) the button or link for applying the action certificate, such as "2C" As shown in the flow, the application executed by the client 110 can be connected to the portal server 120 (step 211).

Next, the portal server 120 can direct the client 110 to read the valid credentials of the user and transfer the read valid credentials to the registration server 130 (step 215), so that the registration server 130 can receive the client 110. A valid credential is provided (step 210).

In the above embodiment, if the portal server 120 is connected to the plurality of registration servers 130, the portal server 120 may be before the portal server 120 directs the client 110 to transmit the valid credentials to the registration server 130 (step 215). The providing client 110 selects a registration server 130. For example, if the portal server 120 is a web server, and the portal server 120 is connected to the registration server 130 that provides the tax service and the registration server 130 that can provide the stock service, the client 110 is connected to the portal server 120. Thereafter, the portal server 120 may transmit a webpage of the registration server 130 that selects the tax service or the stock service to the client 110, so that the user of the client 110 selects the registration server 130 corresponding to the valid credential transmitted by the client 110. The registration server 130 for the tax service or the stock service, and in accordance with the selection of the user of the client 110, directs the client 110 to connect with the selected registration server 130.

In summary, it can be seen that the difference between the present creation and the prior art is that after the valid certificate provided by the client is verified by the verification server, the registration server generates the voucher application data including the applicant data and the verification data, and The voucher application signature signed by the client corresponding to the voucher application data, the voucher management server successfully validates the voucher application data according to the voucher application signature, and generates the registration data of the action voucher according to the voucher application data, and judges the same or different customers When the confirmation data transmitted by the terminal is consistent with the voucher application data, the action voucher generated by the voucher request file transmitted by the client is transmitted to the technical means of the client transmitting the confirmation data and the voucher request file, thereby using a technical means It can solve the problem that the application for the electronic voucher in the prior art needs to confirm the identity of the applicant, and the applicant needs to personally come to the cabinet to cause the inconvenience of the applicant, thereby achieving the technical effect of facilitating the application of the electronic voucher.

Furthermore, the creation can be implemented in hardware, software or a combination of hardware and software, or in a centralized manner in a computer system or in a distributed manner in which different components are interspersed among several interconnected computer systems.

Although the embodiments disclosed in the present disclosure are as above, the contents are not intended to directly limit the scope of the patent protection of the present invention. Anyone who has the usual knowledge in the technical field of this creation, without any departure from the spirit and scope disclosed in this creation, makes some modifications to the form and details of the implementation of this creation, which are the patent protection of this creation. range. The scope of patent protection of this creation must be determined by the scope of the attached patent application.

110‧‧‧Client
110a‧‧‧First client
110b‧‧‧second client
110c‧‧‧ third client
120‧‧‧Entry server
130‧‧‧Registered server
131‧‧‧ Registration Module
140‧‧‧Verification server
160‧‧‧Voucher Management Server Step 210‧‧‧ The registration server receives the valid credentials provided by the first client. Step 211‧‧‧Connect the first client to the portal server Step 215‧‧ Enter the server The first client transmits a valid credential to the registration server. Step 221‧‧ The registration server verifies the valid credential through the authentication server. Step 225‧‧ The registration server determines whether the valid credential has passed the verification step 230‧‧‧ Registration server provides the first A client enters the applicant information and verification data. Step 240‧‧ The registration server receives the first client to use the valid certificate to sign the voucher for the voucher application data signature. Step 249‧‧‧Voucher management server receives registration Voucher application information and voucher application signature step transmitted by the server 251‧‧‧Voucher management server according to the voucher application signature verification voucher application data Step 255‧‧ The voucher management server judges whether the voucher application data has passed the verification step 260‧ ‧ The voucher management server generates the registration data of the action voucher according to the voucher application data. Step 280 ‧ The second client provides the input confirmation data and transmits the confirmation data and the voucher request file to the voucher management server. Step 282‧‧ The second client transmits the identity identification data to the voucher management server Step 284‧‧ 凭证Voucher management servo The authentication code is transmitted to the second client. Step 286‧‧ The second client transmits the authentication code and the verification password to the credential management server. Step 291‧‧ The credential management server determines whether the confirmation data matches the voucher application data. ‧ The credential management server transmits the action credential generated according to the credential request file to the second client

Figure 1A is a system architecture diagram of the online application for action voucher with valid credentials. Figure 1B is another system architecture diagram of the online application for action voucher with valid credentials. FIG. 1C is a diagram showing another system architecture for applying for an action voucher on a valid voucher line according to the present invention. Figure 2A is a flow chart of the method for applying for an action voucher on a valid voucher line. Figure 2B is a flow chart of the method for downloading the credential management program of the client provided by the author. Figure 2C is a flow chart of the method for downloading action credentials through the credential management program proposed by the author.

110a‧‧‧First client

110b‧‧‧second client

130‧‧‧Registered server

131‧‧‧ Registration Module

140‧‧‧Verification server

160‧‧‧Voucher Management Server

Claims (10)

A system for applying for an action voucher on a valid voucher line, the system comprising: a first client for providing a valid credential; a verification server; and a registration server for verifying the valid credential through the verification server And when the valid certificate is verified, the first client is provided to input an applicant data and a verification data, and the first client uses the valid certificate to sign a voucher application data to generate a certificate. Applying for a signature, wherein the voucher application information includes the applicant information and the verification data; a second client for providing input of a confirmation data and transmitting a voucher request file; and a voucher management server for receiving The voucher application data and the voucher application signature transmitted by the registration server, and the voucher application certificate is verified according to the voucher application certificate, and a registration data for generating a action voucher according to the voucher application data is determined, and the When the confirmation data transmitted by the second client matches the certificate application data, according to the second client Generating the authentication request action document file, and transmits the document operation to the second client. The system for applying for a mobile voucher on a valid voucher as described in claim 1 wherein the system further includes an entry server for providing the first client connection and directing the first client to transmit the Valid credentials to the registration server. The system for applying for an action voucher online with a valid voucher as described in claim 1, wherein the voucher management server is further configured to transmit one of the credential management programs to download information, and the second client is further configured to The download information downloads the credential management program, wherein the credential management program stores the action credential. The system for applying for an action voucher online with a valid voucher as described in claim 3, wherein the voucher management server transmits the download information by e-mail, wherein the download information includes a download link for downloading the credential management program or QR code. The system for applying for an action voucher online with a valid voucher as described in claim 1 of the patent application, wherein the voucher management server is further configured to determine whether the time difference between the time when the registration data of the action voucher is generated and the time when the confirmation data is received is met And a predetermined value, and when the time difference between the time when the registration data of the action certificate is generated and the time when the confirmation data is received meets the predetermined value, the action certificate is transmitted to the second client. The system for applying for an action certificate online with a valid voucher as described in item 1 of the patent application, wherein the second client is a mobile device. The system for applying for a mobile action voucher on a valid voucher as described in claim 1 of the patent application, wherein the verification data includes an authentication code and a verification password. A system for applying for an action voucher on a valid voucher line, the system comprising at least: a client for providing a valid voucher and transmitting a voucher request file; an entry server for providing the client connection; and a verification servo At least one registration server, each of the registration servers is configured to verify, by the verification server, the valid certificate that is transmitted by the portal server to the registration server, and is used to pass the valid certificate At the time of verification, the client is provided with an applicant data and a verification data, and the voucher application signature is generated by the client using the valid voucher to generate a voucher application signature, wherein the voucher application material includes the application And the verification information; and a voucher management server, configured to receive the voucher application information and the voucher application signature transmitted by the registration server, and apply for signature verification of the voucher application data according to the voucher, and use Generating a registration data according to the voucher application data, and determining the confirmation money transmitted by the client When applying for the certificate matches the data, according to the documents transmitted to the client certificate request file to generate the action and send the voucher to the client action. The system for applying for an action voucher on a valid voucher as described in claim 8 of the patent application, wherein the portal server is further configured to provide the client to select the registration server, and direct the client to transmit the valid credential to the registration server. The system for applying for a mobile voucher on a valid voucher as described in claim 8 wherein the client is further configured to execute a collaborative application for displaying a user interface, the user interface To provide input of the applicant's information and the verification information.